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Foreword 



rd , 



This Technical Specification (TS) has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 



Introduction 



This document has been prepared by the 3GPP Task Force, and contains an example set of algorithms which may be 
used as the authentication and key generation functions /7,/7*,/2,/5,/4,/5 and/5*. (It is not mandatory that the 
particular algorithms specified in this document are used — all seven functions are operator-specifiable rather than 
being fully standardised). This document is one five, which between them form the entire specification of the example 
algorithms, entitled: 

3GPP TS 35.205: "3rd Generation Partnership Project; Technical Specification Group Services and System 
Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP 
authentication and key generation functions fl, fl*, f2, f3, f4, f5 and f5*; 
Document 1: General". 

3GPP TS 35.206: "3rd Generation Partnership Project; Technical Specification Group Services and System 
Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP 
authentication and key generation functions fl, fl*, f2, f3, f4, f5 and f5*; 
Document 2: Algorithm Specification". 

3GPP TS 35.207: "3rd Generation Partnership Project; Technical Specification Group Services and System 
Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP 
authentication and key generation functions fl, fl*, f2, f3, f4, f5 and f5*; 
Document 3: Implementors' Test Data". 

- 3GPP TS 35.208: "3rd Generation Partnership Project; Technical Specification Group Services and System 
Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP 
authentication and key generation functions fl, fl*, f2, f3, f4, f5 and f5*; 
Document 4: Design Conformance Test Data". 

3GPP TR 35.909: "3rd Generation Partnership Project; Technical Specification Group Services and System 
Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example algorithm set for the 3GPP 
authentication and key generation functions fl, fl*, f2, f3, f4, f5 and f5*; 
Document 5: Summary and results of design and evaluation". 
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1 Outline of the design conformance test data 

Section 2 introduces the algorithms and describes the notation used in the subsequent sections. 

Section 3 provides test data for the cryptographic kernel function Rijndael. 

Section 4 provides test data for the MILENAGE authentication and key generation algorithms//, fl * f2, f3, f4, f5 and 
f5*. 

1.1 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[1] 3GPP TS 33.102 v3.5.0: "3rd Generation Partnership Project; Technical Specification Group 

Services and System Aspects; 3G Security; Security Architecture". 

[2] 3GPP TS 33.105 v3.4.0: "3rd Generation Partnership Project; Technical Specification Group 

Services and System Aspects; 3G Security; Cryptographic Algorithm Requirements". 

[3] 3GPP TS 35.206: "3rd Generation Partnership Project; Technical Specification Group Services 

and System Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example 
algorithm set for the 3GPP authentication and key generation functions fl, fl*, f2, f3, f4, f5 and 
f5*; Document 2: Algorithm Specification". 

[4] 3GPP TS 35.207: "3rd Generation Partnership Project; Technical Specification Group Services 

and System Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example 
algorithm set for the 3GPP authentication and key generation functions fl, fl*, f2, G, f4, f5 and 
f5*; Document 3: Implementors' Test Data". 

[5] 3GPP TS 35.208: "3rd Generation Partnership Project; Technical Specification Group Services 

and System Aspects; 3G Security; Specification of the MILENAGE Algorithm Set: An example 
algorithm set for the 3GPP authentication and key generation functions fl, fl*, f2, f3, f4, f5 and 
f5*; Document 4: Design Conformance Test Data" (this document). 

[6] Joan Daemen and Vincent Rijmen: "AES Proposal: Rijndael", available at 

http://csrc.nist.gov/encrvption/aes/i'ound2/AESAlgs/Riindael/Riindael.pdf or 
http://www.esat.kuleuven.ac.be/~riimen/riindael/riindaeldocV2.zip 

[7] http://csrc.nist.gov/encrvption/aes/ 
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2.1 



Introductory information 



Introduction 



Within the security architecture of the 3GPP system there are seven security f unctions f 1, f 1 *, f2,f 3, f 4, f 5 and/5*. 
The operation of these functions falls within the domain of one operator, and the functions are therefore to be specified 
by each operator rather than being fully standardized. The algorithms specified in this document are examples that may 
be used by an operator who does not wish to design his own. 

The inputs and outputs of all seven algorithms are defined in section 2.5. 

This document provides sets of input/output test data for "black box" testing of physical realizations of all algorithms. 

2.2 Radix 

Unless stated otherwise, all test data values presented in this document are in hexadecimal. 



2.3 Bit/Byte ordering 



All data variables in this specification are presented with the most significant bit (or byte) on the left hand side and the 
least significant bit (or byte) on the right hand side. Where a variable is broken down into a number of substrings, the 
leftmost (most significant) substring is numbered 0, the next most significant is numbered 1, and so on through to the 
least significant. 



2.4 



List of Variables 



AK 

AMF 

cl,c2,c3,c4,c5 

CK 

IK 

K 

MAC-A 

MAC-S 

OP 

OPc 

rl,r2,r3,r4,r5 

RAND 

RES 

SQN 



a 48-bit anonymity key that is the output of either of the functions /5 and/5*. 

a 16-bit authentication management field that is an input to the functions// and/Z*. 

128-bit constants, which are XORed onto intermediate variables. 

a 128-bit confidentiality key that is the output of the function/5. 

a 128-bit integrity key that is the output of the function/4. 

a 128-bit subscriber key that is an input to the functions /7,/Z*,/2,/?,/4,/5 and/5*. 

a 64-bit network authentication code that is the output of the function//. 

a 64-bit resynchronisation authentication code that is the output of the function//*. 

a 128-bit Operator Variant Algorithm Configuration Field that is a component of the functions//, 
/7*,AA/4,/5and/5*. 

a 128-bit value derived from OP and K and used within the computation of the functions. 

integers in the range 0-127 inclusive, which define amounts by which intermediate variables are 
cyclically rotated. 

a 128-bit random challenge that is an input to the functions f 1, fl*,f2,f3,f 4, f 5 and/5*. 

a 64-bit signed response that is the output of the function ^2. 

a 48-bit sequence number that is an input to either of the functions// and//*. (For//* this input 
is more precisely called SQNms) 
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2.5 Algorithm Inputs and Outputs 

The inputs to the algorithms are given in tables 1 and 2, the outputs in tables 3-9 below. 

Table 1 . inputs to f1 and f1 * 



1 Parameter 


Size (bits) 


Comment 


K 


128 


Subscriber key K[0]...K[127] 


RAND 


128 


Random challenge RAND[0]...RAND[127] 


SQN 


48 


Sequence number SQN[0]...SQN[47]. (For fr*this input is 
more precisely called SQNms-) 


AMF 


16 


Authentication management field AMF[0]...AI\/IF[15] 


Table 2. inputs to f2, f3, f4, f5 and f5* 


Parameter 


Size (bits) 




K 


128 


Subscriber key K[0]...K[127] 


RAND 


128 


Random challenge RAND[0]...RAND[127] 


Table 3. f1 output 


Parameter 


Size (bits) 


Comment 


MAC-A 


64 


Network authentication code IVIAC-A[0]...MAC-A[63] 


Table4.fr output 


Parameter 


Size (bits) 


Comment 


MAC-S 


64 


Resynch authentication code IV1AC-S[0]...MAC-S[63] 


Tables. /2 output 


Parameter 


Size (bits) 


Comment 


RES 


64 


Response RES[0]...RES[63] 


Tables. « output 


Parameter 


Size (bits) 


Comment 


CK 


128 


Confidentiality key CK[0]...CK[127] 


Table 7. f4 output 


Parameter 


Size (bits) 


Comment 


IK 


128 


Integrity key IKf01...IKf1271 


Tables. f5 output 


P Parameter 


Size (bits) 


Comment 


AK 


48 


Anonymity key AK[0]...AK[47] 


Tables. ^5* output 


, Parameter 


Size (bits) 


Comment 


AK 


48 


Resynch anonymity key AK[0]...AK[47] 



Note: Both f5 and f5* outputs are called AK according to reference [2]. In practice only one of them will be 
calculated in each instance of the authentication and key agreement procedure. 
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2.6 Coverage 

For each of the algorithms the test data sets have been selected such that, provided the entire set of tests is run: 
Each input bit of the Rijndael kernel function will have been in both the "0" and "1" states. 
- Each input bit of the modes (RAND, K, SQN, AMF) will have been in both the "0" and " 1 " states. 
Every S-Box entry of the Rijndael kernel function will have been used. 



Conformance test data for Rijndael 



3.1 Overview 

The test data sets presented here are for the cryptographic kernel function Rijndael. The first 6 test sets are the same as 
in document 3: implementors" test data. 

3.2 Format 

The first test set is shown twice, once in binary format, once in hexadecimal format. This is to explicitly show the 
relationship between the binary data and the hexadecimal representation. The remainder of the test sets are presented in 
hexadecimal format only. A hexadecimal number will be broken up in two rows of two 32-bit words. For example, the 
number ee3 6f 7cf 03 7d3 7d3 6 92f 7f 03 99e794 9a willbe written as 

ee36f7cf 037d37d3 
692f7f03 99e7949a. 

3.3 Test Sets 

3.3.1 Set 1 Binary Format 

Plaintext: 11101110 00110110 11110111 11001111 00000011 01111101 00110111 11010011 01101001 

00101111 01111111 00000011 10011001 11100111 10010100 10011010 

Ciphertext: 10011110 00101001 10000000 11000101 10010111 00111001 11011010 01100111 10110001 

00110110 00110101 01011110 00111100 11101101 11100110 10100010 

Key: 01000110 01011011 01011100 11101000 10110001 10011001 10110100 10011111 10101010 

01011111 00001010 00101110 11100010 00111000 10100110 10111100 
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3.3.2 Hexadecimal Format 



Set 


Plaintext 


Ciphertext 


Key 


1 


ee36f7cf 037d37d3 
692f7f03 99e7949a 


9e2980c5 9739da67 
bl36355e 3cede6a2 


465b5ce8 bl99b49f 
aa5f0a2e e23Ba6bc 


2 


93CC3640 C5d6a521 
d81235bd 0882bfOa 


009a9e09 96561525 
f611667b bf79e226 


0396eb31 7b6dlc36 
fl9clcB4 cd6ffdl6 


3 


8f7a8fOd 108b7f2d 
97a53eac Cld958d9 


5d9bce85 4decafOd 
a93d28b7 e35f608c 


fecB6ba6 eb707ed0 
B905757b lbb44bBf 


4 


68c98bbf ab628ecl 
adf2a3d9 Oc34a751 


db2944cc e8e683cd 
03fffl99 31al2135 


9e5944ae a94bBllG 
5cB2fbf9 f32db751 


5 


a840bldd 60249aa3 
22016b4b 31daf3b8 


02bffada 7137c492 
c00e8452 d8c76eaa 


4abldebO ScaScebO 
51fc9Be7 7d026aB4 


6 


d66789ef f5996b9c 
ffd89eOa 77148657 


bdf226fe cf9ff996 
Ie5c2621 b764efbl 


Gc3Ball6 ac2B0c45 
4f59332e e35cBc4f 


7 


8cbdb88c 620ffe88 
f8ce0042 a5052568 


fe8d6888 b5a5cl46 
efea6660 f7b4e699 


523ace4B 994925ca 
0495efd5 0c7c71e2 


8 


83a4dbcc f3ffl2e2 
154dbf45 512b5a32 


Ic3aff64 cd717a6e 
959c95c8 b9cd7d3f 


e4aee4fa eeb2f93d 
43e04f5f 2ee5ff25 


9 


dll7610c 04f5d3d6 
Id8cb6bc 910a918b 


21bc0073 cc9aa7a3 
81257774 43f8663f 


b2c211ec 004d0323 
022e49cc d3e3cBff 


10 


9d7cf334 be57ea4d 
37f28c8f 8fOa7259 


1591d87d 8fa69176 
eae9fae9 02cd61a4 


443c5a67 59e04dc2 
c9cee4G5 B23dd5bG 


11 


0f3c382c 488efe2d 
8ce7eaa7 7093a486 


c59e0669 76d92f8e 
567b806f 94fb09d2 


23e5c9bl B034dfG4 
21f22972 C3bd2d93 


12 


51cOd9dc cb03b860 
43d378ea 5fOddOf8 


ff00e5al a02f7594 
3b4a5ale 39bf5dc3 


dGB5G512 fdllbf4f 
917Ble3b lea9dBde 


13 


886f7d2c 6fldc0cc 
851fdd41 82e09d99 


3f65bcl7 b47b645b 
0fbfbfe8 da4269bf 


e5e43Gd4 593ef7cb 
a221cd07 Iccadfdf 


14 


dfbOcd05 5b43bd5b 
7a31c294 0174b44f 


32976e2e d7fb97b2 
bcaabaOO 80fafle5 


d9c9453e lbB5Bf22 
dab53e20 44eB49de 


15 


7ced704d b8df58f4 
4972cecc 0531bc04 


53772447 4cfl7c9b 
105673b5 f37581c8 


3Bfe9997 cbacBd9a 
c4fc7Bcc lfcble22 


16 


878dOfee ad58387e 
lb4aaacf b6805e9f 


e555cfb7 9663f0ea 
fdcc9665 55d6498d 


Bd493a2B fl7cfb7d 
e5beB354 333aGGf4 


17 


29f852ce 631605e3 
1722fd87 3bc74208 


d78106ad 6fdae41c 
95dd2f7b 5b479a79 


5d733139 IGbdeOll 
c7c2G700 0bfe2a9c 


18 


8995eOd7 0281690a 
666070db bd6fOf27 


70b059ad f647dl83 
al8512a3 72ae683c 


3244B511 cl37459f 
fldl2cl7 2cdf72G2 


19 


dlce62ef blOlOadb 
2f6eabb2 63el6ee4 


ec7fc8bl 10246889 
cff7293f e30c8465 


93B33efa 7bbl31Ge 
ebb3dbe3 20a544Bd 


20 


260a7fOO 98fe903e 
9bb255f6 56840627 


91747de6 7effaff8 
578381ef 27e497ec 


09faG53a cbfSaccB 
3e307caa GelBaaG? 



Conformance test data for MILENAGE 



4.1 



Overview 



The test data sets presented here are for the seven functions fl , fl *, f2, f 3, f 4, f 5 and/5*. The first 6 test sets are the 
same as in document 2: implementors" test data. 



4.2 



Format 



Each Test shows the various inputs to the algorithm. This is followed by the configuration field OP, the value 
OPc = OP © E[OP]k and finally by the function outputs. 

The first test set is shown twice, once in binary format, once in hexadecimal format. This is to explicitly show the 
relationship between the binary data and the hexadecimal representation. The remainder of the test sets are presented in 
hexadecimal format only. 
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4.3 



Test Sets 



4.3.1 Set 1 

Binary Format 



K: 

RAND: 

SQN: 
AMF: 
OP: 

OPc: 

fl: 

fl*: 

f2 

f5 

f3 

f4: 

f5*: 



01000110 
00001010 
00100011 
11100110 

11111111 

10111001 
11001101 
01100111 
11001101 
10011001 
01001010 
00000001 
10100101 
10101010 
10110100 
11011001 
11110111 
01110010 
01000101 



01011011 
00101110 
01010101 
01001101 
10011011 
10111001 
11000010 
01101010 
01100011 
01001110 
10011111 
11001111 
01000010 
01101000 
00001011 
10000111 
01101001 
01110001 
00011110 



01011100 11101000 10110001 10011001 10110100 10011111 10101010 01011111 

11100010 00111000 10100110 10111100 

00111100 10111110 10010110 00110111 10101000 10011101 00100001 10001010 

10101110 01000111 10111111 00110101 
10110100 11010000 10110110 00000111 

00000010 11010101 00010010 00111110 00100000 11110110 00101011 01101101 

11000111 00101100 10110011 00011000 

11001011 01110001 10010101 01001010 10011111 01001110 01001000 10100101 

00110111 10100000 00101011 10101111 

11111010 11000011 01010100 11011111 10101111 10110011 

10101111 10011110 11000100 11101000 01110001 11101001 
00010001 11010101 11100011 10111010 01010000 10111111 
10011100 01100100 10000011 01110000 

10101001 10100011 11000101 10001011 00101010 00000101 10111011 11110000 

10110010 00011011 11111000 11001011 

10111100 11010111 01010001 00000100 01000110 00000100 00010010 01110110 

00011100 01101101 00110100 01000001 

10001011 11101100 10100100 00111011 



Hexadecimal Format 



Variable 


Value 


K 


465b5ce8 


bl99b49f 


aa5fOa2e e238a6bc 


RAND 


23553cbe 


9637a89d 


218ae64d ae47bf35 


SQN 


ff9bb4dO 


b607 




AMF 


b9b9 


OP 


cdc202d5 


123e20f6 


2b6d676a c72cb318 


OPc 


cd63cb71 


954a9f4e 


48a5994e 37a02baf 


f1 


4a9ffac3 


54dfafb3 




f1* 


01cfaf9e 


C4e871e9 




f2 


a54211d5 


e3ba50bf 




f5 


aa689c64 


8370 




f3 


b40ba9a3 


C58b2a05 


bbf0d987 b21bf8cb 


f4 


f769bcd7 


51044604 


12767271 Ic6d3441 


f5* 


451e8bec 


a43b 





4.3.2 Test Set 2 



Variable 


Value 


K 


465b5ce8 


bl99b49f 


aa5f0a2e e238a6bc 


RAND 


23553cbe 


9637a89d 


218ae64d ae47bf35 


SON 


ff9bb4dO 


b607 




AMF 


b9b9 


OP 


cdc202d5 


123e20f6 


2b6d676a c72cb318 


OPc 


cd63cb71 


954a9f4e 


48a5994e 37a02baf 


f1 


4a9ffac3 


54dfafb3 




f1* 


01cfaf9e 


C4e871e9 




f2 


a54211d5 


e3ba50bf 




f5 


aa689c64 


8370 




f3 


b40ba9a3 


C58b2a05 


bbf0d987 b21bf8cb 


f4 


f769bcd7 


51044604 


12767271 Ic6d3441 


f5* 


451e8bec 


a43b 
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4.3.3 Test Set 3 



Variable 


Value 


K 


fec86ba6 


eb707edO 


8905757b Ibb44b8f 


RAND 


9f7c8d02 


laccf4db 


213ccffO C7f71a6a 


SQN 


9d027759 


5ffc 




AMF 


725c 


OP 


dbc5 9adc 


b6f9a0ef 


735477b7 fadf8374 


OPc 


1006020f 


Oa478bf6 


b699fl5c 062e42b3 


f1 


9cabc3e9 


9baf7281 




f1* 


95814ba2 


b3044324 




f2 


8011c48c 


Oc214ed2 




f5 


33484dc2 


136b 




f3 


5dbdbb2 9 


54e8f3cd 


e665b046 179a5098 


f4 


59a92d3b 


476a0443 


487055cf 88b2307b 


f5* 


deacdd84 


8cc6 





4.3.4 Test Set 4 



Variable 


Value 


K 


9e5944ae 


a94b8116 


5c82fbf9 f32db751 


RAND 


ce83dbc5 


4ac0274a 


157cl7f8 Od017bd6 


SQN 


Ob604a81 


ecaS 




AMF 


9e09 


OP 


223014C5 


806694C0 


07caleee f57f004f 


OPc 


a64a507a 


ela2a98b 


b88eb421 0135dc87 


f1 


74a58220 


cba84c49 




f1* 


ac2cc74a 


96871837 




f2 


f365cd68 


3cd92e96 




f5 


f0b9c08a 


d02e 




f3 


e203edb3 


971574f5 


a94bOd61 b816345d 


f4 


Oc4524ad 


eac041c4 


dd830d20 854fc46b 


f5* 


6085a86c 


6f63 





4.3.5 Test Set 5 



Variable 


Value 


K 


4abldebO 


5ca6cebO 


51fc98e7 7d026a84 


RAND 


74bOcd60 


31alc833 


9b2b6ce2 b8c4al86 


SON 


e880alb5 


80b6 




AMF 


9f07 


OP 


2dl6c5cd 


Ifdf6b22 


383584e3 bef2a8d8 


OPc 


dcf07cbd 


51855290 


b92a07a9 891e523e 


f1 


49e785dd 


12626ef2 




f1* 


9e857903 


36bb3fa2 




f2 


5860fclb 


ce351e7e 




f5 


31ella60 


9118 




f3 


7657766b 


373dlc21 


38f307e3 de9242f9 


f4 


Ic42e960 


d89b8fa9 


9f2744e0 708ccb53 


f5* 


fe2555e5 


4aa9 
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4.3.6 Test Set 6 



Variable 


Value 


K 


6c38all6 


ac280c45 


4f59332e e35c8c4f 


RAND 


eeS4S6bc 


9S202c5a 


557abbef f8babf63 


SQN 


414b9822 


2181 




AMF 


4464 


OP 


IbaOOala 


7c6700ac 


8c3ff3e9 6ad08725 


OPc 


3803ef53 


63b947c6 


aaa225e5 8fae3934 


f1 


078adfb4 


88241a57 




f1* 


80246b8d 


0186bcfl 




f2 


16c8233f 


05aOac28 




f5 


45bOf69a 


b06c 




f3 


3f8c7587 


fe8e4b23 


3af676ae de30ba3b 


f4 


a7466ccl 


e6b2al33 


7d49d3b6 6e95d7b4 


f5* 


If53cd2b 


1113 





4.3.7 Test Set 7 



Variable 


Value 


K 


2dS09d4d 


bOacSbfO 


d2c0de26 7014deOd 


RAND 


194aa756 


013896b7 


4b4a2a3b Oaf4539e 


SQN 


6bf69438 


c2e4 




AMF 


5f67 


OP 


460a4838 


5427aa39 


264aac8e fc9e73e8 


OPc 


c35aOabO 


bcbfc925 


2caffl5f 24efbdeO 


f1 


bd07d300 


3b9e5cc3 




f1* 


bcb6c2fc 


adl52250 




f2 


8c25al6c 


d918aldf 




f5 


7e6455f3 


4cf3 




f3 


4cd08460 


20f8fa07 


31dd47cb dc6be411 


f4 


88ab80a4 


15fl5c73 


711254al d388f696 


f5* 


dc6dd01e 


8fl5 





4.3.8 Test Set 8 



Variable 


Value 


K 


a530a7fe 


428fadl0 


82c45edd fcel3884 


RAND 


3a4c2b32 


45c50eb5 


C71d0863 9395764d 


SON 


f63f5d76 


8784 




AMF 


b90e 


OP 


511c6c4e 


83e38c89 


blc5d8dd e62426fa 


OPc 


27953e49 


bc8af 6dc 


c6e730eb 80286be3 


f1 


53761fbd 


679bObad 




f1* 


21adfd33 


4alOe7ce 




f2 


a63241el 


ffc3e5ab 




f5 


88196C47 


986f 




f3 


lOfOSbab 


75a99a5f 


bb98a9c2 87679c3b 


f4 


f9ec0865 


eb32f223 


69cade40 C59c3a44 


f5* 


C987a3d2 


3115 
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4.3.9 Test Set 9 



Variable 


Value 


K 


d9151cfO 


4896e258 


30bf2e08 267b8360 


RAND 


f761e5e9 


3d603feb 


730e2755 6cb8a2ca 


SQN 


47ee0199 


820a 




AMF 


9113 


OP 


75fc2233 


a44294ee 


8eSde25c 4353d2Sb 


OPc 


c4c93ef f 


e8a08138 


C203d4c2 7ce4e3d9 


f1 


66cc4be4 


4862aflf 




f1* 


7a4b8d7a 


8753f246 




f2 


4a90b217 


Iac83a76 




f5 


82aOf528 


7a71 




f3 


71236b71 


29f9b22a 


b77ea7a5 4c96da22 


f4 


90527eba 


a5588968 


db417273 25a04d9e 


f5* 


527dbf41 


f35f 





4.3.10 Test Set 10 



Variable 


Value 


K 


a0e2971b 


6822e8d3 


54al8cc2 35624ecb 


RAND 


08eff828 


bl3fdb56 


2722c65c 7f30a9b2 


SQN 


db5c0664 


aieo 




AMF 


716b 


OP 


323792fa 


ca21fb4d 


5d6fl3cl 45a9d2cl 


OPc 


82a26f22 


bba9e948 


8f949alO d98e9cc4 


f1 


9485fe24 


621cb9f6 




f1* 


bce325ce 


03e2e9b9 




f2 


4bc2212d 


8624910a 




f5 


a2f 858aa 


9e5d 




f3 


08cef6d0 


04ec6147 


Ia3c3cda 048137fa 


f4 


ed0318ca 


5deb9206 


272f6e8f a64ba411 


f5* 


74e76fbb 


ec38 





4.3.11 Test Set 11 



Variable 


Value 


K 


0da6f7ba 


86d5eac8 


al9cf563 ac58642d 


RAND 


679ac4db 


acd7d233 


ff9d6806 f4149ce3 


SON 


6e2331d6 


92ad 




AMF 


224a 


OP 


4b9a26fa 


459e3acb 


ff36f401 5de3bdcl 


OPc 


Odbl071f 


8767562c 


a43aOa64 C41e8d08 


f1 


2831d7ae 


9088e492 




f1* 


9b2el695 


1135d523 




f2 


6fc30fee 


6dl23523 




f5 


4c539a26 


elfa 




f3 


69blcae7 


c7429d97 


5e245cac b05a517c 


f4 


74f24e8c 


26df58el 


b38d7dcd 4flb7fbd 


f5* 


07861el2 


6928 
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4.3.12 Test Set 12 



Variable 


Value 


K 


77b45843 


c88e58cl 


Od202684 515ed430 


RAND 


4c47eb30 


76dc55fe 


5106cb20 34b8cd78 


SQN 


fela8731 


005d 




AMF 


ad2 5 


OP 


bf3286c7 


a51409ce 


95724d50 3bfeSe70 


OPc 


d483afae 


562409a3 


26b5bbOb 20c4d762 


f1 


08332d7e 


9f484570 




f1* 


ed41b734 


489d5207 




f2 


aefa357b 


eac2a87a 




f5 


30ff25cd 


adf6 




f3 


908c43fO 


569cb8f7 


4bc971e7 06c36c5f 


f4 


c251dfOd 


888dd932 


9bcf4665 5b226e40 


f5* 


e84edOd4 


677e 





4.3.13 Test Set 13 



Variable 


Value 


K 


729bl772 


9270dd87 


ccdflbfe 29b4e9bb 


RAND 


311c4c92 


9744d675 


b720f3b7 e9blcbdO 


SQN 


C85c4cf6 


5916 




AMF 


5bb2 


OP 


d04c9c35 


bd2262fa 


810d2924 d036fdl3 


OPc 


228c2f2f 


06ac3268 


a9e616ee 16db4bal 


f1 


ff794fe2 


f827ebf8 




f1* 


24fe4dc6 


Ie874b52 




f2 


98dbbd09 


9b3b408d 




f5 


5380dl58 


cfe3 




f3 


44cOf23c 


5493cfd2 


41e48fl9 7eldl012 


f4 


Oc9fb81S 


13884C25 


35ddOeab f3b440d8 


f5* 


87ac3b55 


9fb6 





4.3.14 Test Set 14 



Variable 


Value 


K 


d32dd23e 


89dc6623 


54cal2eb 79dd32fa 


RAND 


cf7dOabl 


d9430695 


Obfl2018 fbd46887 


SON 


48410765 


6a43 




AMF 


b5e6 


OP 


fe75905b 


9da47d35 


6236d031 4e09c32e 


OPc 


d22a4b41 


80a53257 


08a5ff70 d9f67ec7 


f1 


cfl9d62b 


6a809866 




f1* 


5d269537 


e45e2ce6 




f2 


af4a411e 


1139f2c2 




f5 


217af492 


72ad 




f3 


5af86b80 


edb70df5 


292CC112 lcbad50c 


f4 


7f4d6ae7 


440el878 


9a8b75ad 3f42f03a 


f5* 


900el01c 


S77e 
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4.3.15 Test Set 15 



Variable 


Value 


K 


af7c65el 


927221de 


591187a2 c5987a53 


RAND 


If0f8578 


464fd59b 


64bed2dO 9436b57a 


SQN 


3d627b01 


418d 




AMF 


84f6 


OP 


Oc7acb8d 


95b7d4a3 


Ic5aca6d 26345a88 


OPc 


a4cf5c81 


55c08a7e 


ff418e54 43b98e55 


f1 


c37cae78 


05642032 




f1* 


S8cd09a4 


52d8db7c 




f2 


7bffa5c2 


f41fbc05 




f5 


837fd7b7 


4419 




f3 


3f8c3f3c 


cf7625bf 


77fc94bc fd22fd26 


f4 


abcbae8f 


d46115e9 


961a55dO da5f2078 


f5* 


56e97a60 


90bl 





4.3.16 Test Set 16 



Variable 


Value 


K 


5bd7ecd3 


d3127a41 


dl2539be d4e7cf71 


RAND 


59b75fl4 


251C7503 


IdObcbac Ic2c04c7 


SQN 


a298ae89 


2 9dc 




AMF 


d056 


OP 


f967f760 


38b920a9 


cd25elOc 08b49924 


OPc 


76089d3c 


0ff3efdc 


6e36721d 4fceb747 


f1 


C3f25cd9 


43091076 




f1* 


bOc8ba34 


3665afcc 




f2 


7e3f44c7 


591f6f45 




f5 


5bell495 


525d 




f3 


d42b2d61 


5e49a03a 


c275a5ae f97af892 


f4 


Ob3f8d02 


4fe6bfaf 


aa982b8f 82e319c2 


f5* 


4d6a34al 


e4eb 





4.3.17 Test Set 17 



Variable 


Value 


K 


6cdlc6ce 


ble01el4 


flb82316 a90b7f3d 


RAND 


f69b78f3 


00a0568b 


ce9fOcb9 3c4be4c9 


SON 


b4fce5fe 


b059 




AMF 


e4bb 


OP 


078bfca9 


564659ec 


d8851e84 e6c59b48 


OPc 


a219dc37 


fldc7d66 


738b5843 c799f206 


f1 


69a90869 


c268cb7b 




f1* 


2eOfdcf9 


fdlcfa6a 




f2 


70f6bdb9 


ad21525f 




f5 


Ic408a85 


8b3e 




f3 


6edaf99e 


5bd9f85d 


5f36d91c 1272fb4b 


f4 


d61c853c 


280dd9c4 


6f297bae c386del7 


f5* 


aa4ae52d 


aa30 
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4.3.18 Test Set 18 



Variable 


Value 


K 


b73a90cb 


cf3afb62 


2dba83c5 8a8415df 


RAND 


bl20flcl 


a0102a2f 


507dd543 de68281f 


SQN 


fle8a523 


a36d 




AMF 


471b 


OP 


b672047e 


003bb952 


dcaScb8a fOe5b779 


OPc 


dfOc6786 


8fa25f74 


8b7044c6 e7c245b8 


f1 


ebd70341 


bcd415bO 




f1* 


12359f5d 


82220C14 




f2 


479dd25c 


20792d63 




f5 


aefdaaSd 


dd99 




f3 


66195dbe 


d0313274 


c5ca7766 615fa25e 


f4 


66bec707 


eb2afc47 


6d7408a8 f2927b36 


f5* 


12ec2b87 


fbbl 





4.3.19 Test Set 19 



Variable 


Value 


K 


51222502 


14c33e72 


3a5dd523 fcl45fcO 


RAND 


81e92b6c 


OeeOel2e 


bceba8d9 2a99dfa5 


SQN 


16f3b3f7 


Ofc2 




AMF 


c3ab 


OP 


c9e87632 


86b5b9ff 


bdf56el2 97d0887b 


OPc 


981d464c 


7c52eb6e 


50362349 84adObcf 


f1 


2a5c23dl 


5ee351d5 




f1* 


62dae385 


3f3af9d2 




f2 


28d7bOf2 


a2ec3de5 




f5 


adal5aeb 


7bb8 




f3 


5349fbeO 


98649f94 


8f5d2e97 3a81c00f 


f4 


9744871a 


d32bf9bb 


dldd5ce5 4e3e2e5a 


f5* 


d461bcl5 


475d 





4.3.20 Test Set 20 



Variable 


Value 


K 


90dca4ed 


a45b53cf 


Ofl2d7c9 C3bc6a89 


RAND 


9fddc720 


92c6ad03 


6b6e4S47 89315b78 


SON 


20f813bd 


4141 




AMF 


61df 


OP 


3ffcfe5b 


7bllll58 


9920d352 8e84e655 


OPc 


cb9cccc4 


b9258e6d 


ca476037 9fb82581 


f1 


09db94ea 


b4f8149e 




f1* 


a29468aa 


9775b527 




f2 


a95100e2 


760952cd 




f5 


83cfd54d 


b913 




f3 


b5f2da03 


883b69f9 


6bf52e02 9ed9ac45 


f4 


b4721368 


bcl6ea67 


875C5598 688bb0ef 


f5* 


4f203939 


2ddc 
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Annex A (informative): 
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